@namzu/sdk 5.1.0 → 6.0.0

package/dist/plugin/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/plugin/loader.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,cAAc,EAAwB,MAAM,0BAA0B,CAAA;AAKpF;;;GAGG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAwB1E;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAOnF;AAYD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAQ/D;AAED,6GAA6G;AAC7G,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,MAAM,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACtC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;IAChC,yDAAyD;IACzD,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,WAAW,EAAE,CAAA;CAC/C;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,qBAAqB,CAC1C,gBAAgB,CAAC,EAAE,MAAM,EACzB,OAAO,CAAC,EAAE,sBAAsB,GAC9B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA6BhD"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/plugin/loader.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,cAAc,EAAwB,MAAM,0BAA0B,CAAA;AAKpF;;;GAGG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAkC1E;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAOnF;AAYD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAQ/D;AAED,6GAA6G;AAC7G,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,MAAM,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACtC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;IAChC,yDAAyD;IACzD,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,WAAW,EAAE,CAAA;CAC/C;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,qBAAqB,CAC1C,gBAAgB,CAAC,EAAE,MAAM,EACzB,OAAO,CAAC,EAAE,sBAAsB,GAC9B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA6BhD"}

package/dist/plugin/loader.js

@@ -1,4 +1,4 @@
-import { readFile, readdir, stat } from 'node:fs/promises';
+import { lstat, readFile, readdir, stat } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { PLUGIN_MANIFEST_FILENAME, PROJECT_PLUGIN_DIR, USER_PLUGIN_DIR, } from '../constants/plugin/index.js';
@@ -17,7 +17,17 @@ export async function discoverPlugins(parentDir) {
             if (entry.startsWith('.') || entry.startsWith('_'))
                 continue;
             const fullPath = join(parentDir, entry);
-            const s = await stat(fullPath);
+            // `lstat`, not `stat`: `stat` follows the link and reports on its
+            // TARGET, so a symlinked entry pointing anywhere on disk was
+            // admitted as a plugin directory and its manifest read from there.
+            // A plugins directory holds third-party code by definition, which
+            // makes following a link out of it the worse half of CWE-59 — the
+            // directory listed is not the directory loaded.
+            const s = await lstat(fullPath);
+            if (s.isSymbolicLink()) {
+                logger.warn('Refusing a symlinked plugin directory', { path: fullPath });
+                continue;
+            }
             if (!s.isDirectory())
                 continue;
             const manifestPath = join(fullPath, PLUGIN_MANIFEST_FILENAME);

package/dist/plugin/loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/plugin/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EACN,wBAAwB,EACxB,kBAAkB,EAClB,eAAe,GACf,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAuB,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAA;AAEnE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACtD,MAAM,IAAI,GAAa,EAAE,CAAA;IAEzB,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAA;QACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAQ;YAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YACvC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAA;YAC9B,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;gBAAE,SAAQ;YAE9B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAA;YAC7D,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,YAAY,CAAC,CAAA;gBACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACpB,CAAC;YAAC,MAAM,CAAC;gBACR,uCAAuC;YACxC,CAAC;QACF,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED,OAAO,IAAI,CAAA;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAA;IAC9D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACnD,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAC1B,OAAO,QAAQ,CAAA;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,yBAAyB,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAU,CAAA;AAE/E;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAwB;IACxD,MAAM,MAAM,GAAG,QAA4D,CAAA;IAC3E,MAAM,WAAW,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAA;IAClF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAEpC,MAAM,IAAI,KAAK,CACd,WAAW,QAAQ,CAAC,IAAI,oCAAoC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,2TAA2T,CAC7Y,CAAA;AACF,CAAC;AAoBD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,gBAAyB,EACzB,OAAgC;IAEhC,IAAI,OAAO,EAAE,OAAO,KAAK,KAAK,IAAI,OAAO,EAAE,aAAa,KAAK,KAAK,EAAE,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;YACxC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa,EAAE,OAAO,CAAC,aAAa;SACpC,CAAC,CAAA;QACF,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;IACjC,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,EAAE,aAAa,CAAA;IACrC,MAAM,OAAO,GAAG,CAAC,KAAkB,EAAW,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAElF,MAAM,UAAU,GAAG,gBAAgB;QAClC,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAA;IAEhD,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;KAChE,CAAC,CAAA;IAEF,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;QACzC,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC,CAAA;IAEF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AACzB,CAAC"}
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/plugin/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EACN,wBAAwB,EACxB,kBAAkB,EAClB,eAAe,GACf,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAuB,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAA;AAEnE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACtD,MAAM,IAAI,GAAa,EAAE,CAAA;IAEzB,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAA;QACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAQ;YAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YACvC,kEAAkE;YAClE,6DAA6D;YAC7D,mEAAmE;YACnE,kEAAkE;YAClE,kEAAkE;YAClE,gDAAgD;YAChD,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAA;YAC/B,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;gBACxE,SAAQ;YACT,CAAC;YACD,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;gBAAE,SAAQ;YAE9B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAA;YAC7D,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,YAAY,CAAC,CAAA;gBACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACpB,CAAC;YAAC,MAAM,CAAC;gBACR,uCAAuC;YACxC,CAAC;QACF,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED,OAAO,IAAI,CAAA;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAA;IAC9D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACjD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACnD,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAC1B,OAAO,QAAQ,CAAA;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,yBAAyB,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAU,CAAA;AAE/E;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAwB;IACxD,MAAM,MAAM,GAAG,QAA4D,CAAA;IAC3E,MAAM,WAAW,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAA;IAClF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAEpC,MAAM,IAAI,KAAK,CACd,WAAW,QAAQ,CAAC,IAAI,oCAAoC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,2TAA2T,CAC7Y,CAAA;AACF,CAAC;AAoBD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,gBAAyB,EACzB,OAAgC;IAEhC,IAAI,OAAO,EAAE,OAAO,KAAK,KAAK,IAAI,OAAO,EAAE,aAAa,KAAK,KAAK,EAAE,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;YACxC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa,EAAE,OAAO,CAAC,aAAa;SACpC,CAAC,CAAA;QACF,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;IACjC,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,EAAE,aAAa,CAAA;IACrC,MAAM,OAAO,GAAG,CAAC,KAAkB,EAAW,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAElF,MAAM,UAAU,GAAG,gBAAgB;QAClC,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAA;IAEhD,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;KAChE,CAAC,CAAA;IAEF,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;QACzC,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC,CAAA;IAEF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AACzB,CAAC"}

package/dist/provider/__tests__/model-version.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=model-version.test.d.ts.map

package/dist/provider/__tests__/model-version.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-version.test.d.ts","sourceRoot":"","sources":["../../../src/provider/__tests__/model-version.test.ts"],"names":[],"mappings":""}

package/dist/provider/__tests__/model-version.test.js

@@ -0,0 +1,80 @@
+import { describe, expect, it } from 'vitest';
+import { modelVersionAtLeast, parseVersionedModelId } from '../model-version.js';
+/**
+ * The defect this module exists to end: the minor-version group was `\d+`, so
+ * it swallowed the 8-digit release date. An id naming no minor therefore
+ * parsed as `major.<the date>` and compared as enormously NEWER than one that
+ * does, inverting every capability gate keyed on `minor >= n` — a model was
+ * told it supported features it does not.
+ *
+ * Three drivers had each written the same matcher, and all three had it. The
+ * vocabulary below is deliberately invented: the shape is what lives here, and
+ * a test that needed real product names would be testing the wrong layer.
+ */
+const GRAMMAR = {
+    product: 'widget',
+    families: ['small', 'large'],
+    routingPrefix: 'vendor/',
+};
+describe('a date suffix is not a minor version', () => {
+    it.each([
+        ['widget-small-4-20250514', 'small', 4, 0],
+        ['widget-large-4-20250514', 'large', 4, 0],
+        ['widget-small-3-20240307', 'small', 3, 0],
+    ])('%s parses as %s %d.%d', (id, family, major, minor) => {
+        expect(parseVersionedModelId(id, GRAMMAR)).toEqual({ family, major, minor });
+    });
+    it('still reads a real minor that is followed by a date', () => {
+        expect(parseVersionedModelId('widget-large-4-1-20250805', GRAMMAR)).toEqual({
+            family: 'large',
+            major: 4,
+            minor: 1,
+        });
+        expect(parseVersionedModelId('widget-small-4-5-20250929', GRAMMAR)?.minor).toBe(5);
+    });
+    it('treats a missing minor as .0 rather than as absent', () => {
+        expect(parseVersionedModelId('widget-large-5', GRAMMAR)).toEqual({
+            family: 'large',
+            major: 5,
+            minor: 0,
+        });
+    });
+    it('tolerates the routing prefix, the other separators, and case', () => {
+        expect(parseVersionedModelId('vendor/widget-large-4-5', GRAMMAR)?.minor).toBe(5);
+        expect(parseVersionedModelId('widget-large-4.5', GRAMMAR)?.minor).toBe(5);
+        expect(parseVersionedModelId('WIDGET-LARGE-4-5', GRAMMAR)?.major).toBe(4);
+    });
+    it('returns undefined for what the grammar does not describe', () => {
+        for (const id of ['other-large-4', 'widget', 'widget-large', 'widget-medium-4', '']) {
+            expect(parseVersionedModelId(id, GRAMMAR)).toBeUndefined();
+        }
+    });
+    it('escapes regex metacharacters in the grammar', () => {
+        // A product or prefix containing `.` or `+` must match literally, not
+        // as a wildcard. `.map(escape)` — the global, deprecated one — would
+        // percent-encode instead, and pass every other test in this file
+        // because no ordinary name contains a character it changes.
+        const odd = { product: 'a.b', families: ['c+d'] };
+        expect(parseVersionedModelId('a.b-c+d-4', odd)?.major).toBe(4);
+        expect(parseVersionedModelId('axb-cxd-4', odd)).toBeUndefined();
+    });
+});
+describe('modelVersionAtLeast', () => {
+    it('does not let a dated id clear a gate it is below', () => {
+        // The whole point. With the old `\d+` minor this was `true`, because
+        // 4.20250514 >= 4.5.
+        expect(modelVersionAtLeast('widget-small-4-20250514', GRAMMAR, 4, 5)).toBe(false);
+        expect(modelVersionAtLeast('widget-large-4-20250514', GRAMMAR, 4, 7)).toBe(false);
+    });
+    it('admits versions that genuinely clear it', () => {
+        expect(modelVersionAtLeast('widget-small-4-5-20250929', GRAMMAR, 4, 5)).toBe(true);
+        expect(modelVersionAtLeast('widget-large-5', GRAMMAR, 4, 7)).toBe(true);
+        expect(modelVersionAtLeast('widget-large-4-1', GRAMMAR, 4, 5)).toBe(false);
+    });
+    it('refuses a name it cannot parse rather than opening the gate', () => {
+        // Fail-safe: a capability gate must not open for an id it does not
+        // understand.
+        expect(modelVersionAtLeast('something-else', GRAMMAR, 4, 5)).toBe(false);
+    });
+});
+//# sourceMappingURL=model-version.test.js.map

package/dist/provider/__tests__/model-version.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-version.test.js","sourceRoot":"","sources":["../../../src/provider/__tests__/model-version.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAGhF;;;;;;;;;;GAUG;AAEH,MAAM,OAAO,GAAmB;IAC/B,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAC5B,aAAa,EAAE,SAAS;CACxB,CAAA;AAED,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,IAAI,CAAC;QACP,CAAC,yBAAyB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC,yBAAyB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC,yBAAyB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;KAC1C,CAAC,CAAC,uBAAuB,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACxD,MAAM,CAAC,qBAAqB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,qBAAqB,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3E,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,CAAC;SACR,CAAC,CAAA;QACF,MAAM,CAAC,qBAAqB,CAAC,2BAA2B,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,qBAAqB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YAChE,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,CAAC;SACR,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,qBAAqB,CAAC,yBAAyB,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAChF,MAAM,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACzE,MAAM,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QACnE,KAAK,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC;YACrF,MAAM,CAAC,qBAAqB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;QAC3D,CAAC;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACtD,sEAAsE;QACtE,qEAAqE;QACrE,iEAAiE;QACjE,4DAA4D;QAC5D,MAAM,GAAG,GAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,CAAA;QAEjE,MAAM,CAAC,qBAAqB,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9D,MAAM,CAAC,qBAAqB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;IAChE,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC3D,qEAAqE;QACrE,qBAAqB;QACrB,MAAM,CAAC,mBAAmB,CAAC,yBAAyB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACjF,MAAM,CAAC,mBAAmB,CAAC,yBAAyB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,mBAAmB,CAAC,2BAA2B,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClF,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvE,MAAM,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACtE,mEAAmE;QACnE,cAAc;QACd,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/provider/__tests__/strict-schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=strict-schema.test.d.ts.map

package/dist/provider/__tests__/strict-schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strict-schema.test.d.ts","sourceRoot":"","sources":["../../../src/provider/__tests__/strict-schema.test.ts"],"names":[],"mappings":""}

package/dist/provider/__tests__/strict-schema.test.js

@@ -0,0 +1,157 @@
+import { describe, expect, it } from 'vitest';
+import { getBuiltinTools } from '../../tools/builtins/index.js';
+import { assertStrictSchema, findStrictSchemaViolations } from '../strict-schema.js';
+/**
+ * Strict tool input validates against a SUBSET of JSON Schema, and a keyword
+ * outside that subset is not degraded — the vendor rejects the entire request,
+ * so one unexpressible field in one tool takes down every tool in the call and
+ * the turn dies before producing a token.
+ *
+ * That shipped. The edit tool declared its integer-or-`"end"` field with
+ * `oneOf`, which is outside the subset while the equivalent `anyOf` is inside
+ * it, and the driver marked the tool strict without asking whether the schema
+ * it was vouching for could be said in that dialect.
+ *
+ * Measured against the live API:
+ *
+ * | body                   | result   |
+ * |------------------------|----------|
+ * | strict: true  + oneOf  | 400      |
+ * | strict: false + oneOf  | accepted |
+ * | strict: true  + anyOf  | accepted |
+ *
+ * The middle row is why nothing caught it. Neither half is wrong alone — the
+ * schema is valid JSON Schema, and turning strict on is correct policy — so no
+ * test of either one fails. Only the pairing does, and the pairing had no
+ * owner. The sweep below is that owner.
+ */
+describe('every tool that asks for strict validation can be expressed strictly', () => {
+    // The regression test that matters. Checking only the tool that broke
+    // would leave the next one to be found in production, which is how this
+    // one was found.
+    it.each(getBuiltinTools()
+        .filter((t) => t.enforceModelInput)
+        .map((t) => [t.name, t]))('%s', (name, tool) => {
+        const violations = findStrictSchemaViolations(tool.modelInputSchema);
+        expect(violations, violations.map((v) => `${name}.${v.path}: ${v.remedy}`).join('\n')).toEqual([]);
+    });
+    it('found at least one tool to check', () => {
+        // Guards the sweep itself: a filter that matches nothing passes
+        // vacuously, and a rename of `enforceModelInput` would silently turn
+        // this whole file into a no-op.
+        expect(getBuiltinTools().filter((t) => t.enforceModelInput).length).toBeGreaterThan(0);
+    });
+});
+describe('the violation report names the exact path', () => {
+    it('points at the keyword inside a nested property', () => {
+        const schema = {
+            type: 'object',
+            properties: {
+                insertLine: { oneOf: [{ type: 'integer' }, { const: 'end' }] },
+            },
+        };
+        expect(findStrictSchemaViolations(schema)).toEqual([
+            {
+                path: 'properties.insertLine.oneOf',
+                keyword: 'oneOf',
+                remedy: 'use `anyOf` — for disjoint branches the two are equivalent',
+            },
+        ]);
+    });
+    it('accepts the anyOf spelling of the same union', () => {
+        const schema = {
+            type: 'object',
+            properties: {
+                insertLine: { anyOf: [{ type: 'integer' }, { const: 'end' }] },
+            },
+        };
+        expect(findStrictSchemaViolations(schema)).toEqual([]);
+    });
+    it('reports the bounds the wire refuses, and only those', () => {
+        // Measured against the live API rather than read off a page. The first
+        // version of this list was derived from documentation and was wrong in
+        // both directions: it refused `maxLength`, which the wire accepts, and
+        // permitted `prefixItems`, which it rejects.
+        const schema = {
+            type: 'object',
+            properties: {
+                n: { type: 'integer', minimum: 0 },
+                s: { type: 'string', maxLength: 10 },
+                a: { type: 'array', items: { type: 'string' }, maxItems: 3, minItems: 1 },
+            },
+        };
+        expect(findStrictSchemaViolations(schema)
+            .map((v) => v.keyword)
+            .sort()).toEqual(['maxItems', 'minimum']);
+    });
+    it('leaves string length alone, because strict accepts it', () => {
+        // The false positive that would have refused tools which work.
+        expect(findStrictSchemaViolations({ s: { type: 'string', minLength: 1, maxLength: 9 } })).toEqual([]);
+    });
+    it('catches a tuple in either spelling, because strict admits neither', () => {
+        // The interaction worth pinning, and the one a `prefixItems` entry alone
+        // got wrong. This check runs at REGISTRATION, on the schema as rendered
+        // — draft-07, where a tuple is `items: [a, b]` — while the wire sees the
+        // `prefixItems` the driver converts it to. So denying only `prefixItems`
+        // was a guard that could not fire on the path that produces tuples.
+        //
+        // Measured, strict rejects both, which is why a tool that is both strict
+        // and tuple-shaped cannot be expressed at all. Converting it only
+        // changes which error comes back.
+        for (const items of [
+            { prefixItems: [{ type: 'integer' }, { type: 'integer' }] },
+            { items: [{ type: 'integer' }, { type: 'integer' }] },
+        ]) {
+            const violations = findStrictSchemaViolations({
+                properties: { range: { type: 'array', ...items } },
+            });
+            expect(violations, JSON.stringify(items)).toHaveLength(1);
+            expect(violations[0]?.remedy).toContain('tuple cannot be expressed');
+        }
+    });
+    it('leaves an ordinary array alone, where `items` is one schema', () => {
+        // The false positive the tuple rule must not become: `items` is the
+        // normal spelling for a homogeneous array and strict accepts it. Only
+        // the array-of-schemas form is a tuple.
+        expect(findStrictSchemaViolations({ type: 'array', items: { type: 'string' } })).toEqual([]);
+    });
+    it('admits minItems at 0 or 1 and refuses it above, as the wire does', () => {
+        // A blanket denial here was a false positive with a real cost: it
+        // refuses `z.array(...).nonempty()`, which renders `minItems: 1` and
+        // which the wire accepts. The constraint is on the VALUE, and the
+        // vendor's error says so — "'minItems' values other than 0 or 1 are not
+        // supported".
+        expect(findStrictSchemaViolations({ type: 'array', minItems: 0 })).toEqual([]);
+        expect(findStrictSchemaViolations({ type: 'array', minItems: 1 })).toEqual([]);
+        const violations = findStrictSchemaViolations({ type: 'array', minItems: 2 });
+        expect(violations).toHaveLength(1);
+        expect(violations[0]?.keyword).toBe('minItems');
+    });
+    it('admits additionalProperties only as false', () => {
+        expect(findStrictSchemaViolations({ additionalProperties: false })).toEqual([]);
+        expect(findStrictSchemaViolations({ additionalProperties: { type: 'string' } })).toHaveLength(1);
+    });
+    it('walks into arrays of subschemas', () => {
+        const schema = { anyOf: [{ type: 'string' }, { not: { type: 'null' } }] };
+        expect(findStrictSchemaViolations(schema)[0]?.path).toBe('anyOf[1].not');
+    });
+    it('leaves ordinary annotations alone', () => {
+        const schema = {
+            type: 'object',
+            description: 'a tool',
+            properties: { a: { type: 'string', description: 'x', enum: ['y'] } },
+            required: ['a'],
+            additionalProperties: false,
+        };
+        expect(findStrictSchemaViolations(schema)).toEqual([]);
+    });
+});
+describe('assertStrictSchema refuses rather than letting the request go', () => {
+    it('throws naming the tool, the path and the fix', () => {
+        expect(() => assertStrictSchema('edit', { properties: { insertLine: { oneOf: [] } } })).toThrow(/edit\.properties\.insertLine\.oneOf/);
+    });
+    it('says nothing about a schema that is expressible', () => {
+        expect(() => assertStrictSchema('edit', { type: 'object' })).not.toThrow();
+    });
+});
+//# sourceMappingURL=strict-schema.test.js.map

package/dist/provider/__tests__/strict-schema.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strict-schema.test.js","sourceRoot":"","sources":["../../../src/provider/__tests__/strict-schema.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AAEpF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,QAAQ,CAAC,sEAAsE,EAAE,GAAG,EAAE;IACrF,sEAAsE;IACtE,wEAAwE;IACxE,iBAAiB;IACjB,EAAE,CAAC,IAAI,CACN,eAAe,EAAE;SACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAU,CAAC,CAClC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,UAAU,GAAG,0BAA0B,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QACpE,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAC7F,EAAE,CACF,CAAA;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC3C,gEAAgE;QAChE,qEAAqE;QACrE,gCAAgC;QAChC,MAAM,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACzD,MAAM,MAAM,GAAG;YACd,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACX,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE;aAC9D;SACD,CAAA;QAED,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAClD;gBACC,IAAI,EAAE,6BAA6B;gBACnC,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,4DAA4D;aACpE;SACD,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACvD,MAAM,MAAM,GAAG;YACd,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACX,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE;aAC9D;SACD,CAAA;QAED,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC9D,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,6CAA6C;QAC7C,MAAM,MAAM,GAAG;YACd,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACX,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;gBAClC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE;gBACpC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE;aACzE;SACD,CAAA;QAED,MAAM,CACL,0BAA0B,CAAC,MAAM,CAAC;aAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;aACrB,IAAI,EAAE,CACR,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAChE,+DAA+D;QAC/D,MAAM,CACL,0BAA0B,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CACjF,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC5E,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,oEAAoE;QACpE,EAAE;QACF,yEAAyE;QACzE,kEAAkE;QAClE,kCAAkC;QAClC,KAAK,MAAM,KAAK,IAAI;YACnB,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;YAC3D,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;SACrD,EAAE,CAAC;YACH,MAAM,UAAU,GAAG,0BAA0B,CAAC;gBAC7C,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,EAAE;aAClD,CAAC,CAAA;YAEF,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YACzD,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAA;QACrE,CAAC;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACtE,oEAAoE;QACpE,sEAAsE;QACtE,wCAAwC;QACxC,MAAM,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC3E,kEAAkE;QAClE,qEAAqE;QACrE,kEAAkE;QAClE,wEAAwE;QACxE,cAAc;QACd,MAAM,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC9E,MAAM,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAE9E,MAAM,UAAU,GAAG,0BAA0B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAA;QAC7E,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,0BAA0B,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC/E,MAAM,CAAC,0BAA0B,CAAC,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACjG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAA;QAEzE,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG;YACd,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,QAAQ;YACrB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE;YACpE,QAAQ,EAAE,CAAC,GAAG,CAAC;YACf,oBAAoB,EAAE,KAAK;SAC3B,CAAA;QAED,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,+DAA+D,EAAE,GAAG,EAAE;IAC9E,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAC9F,qCAAqC,CACrC,CAAA;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IAC3E,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/provider/__tests__/vendor-detail.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=vendor-detail.test.d.ts.map

package/dist/provider/__tests__/vendor-detail.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor-detail.test.d.ts","sourceRoot":"","sources":["../../../src/provider/__tests__/vendor-detail.test.ts"],"names":[],"mappings":""}

package/dist/provider/__tests__/vendor-detail.test.js

@@ -0,0 +1,89 @@
+import { describe, expect, it } from 'vitest';
+import { providerHttpError, redactSecrets, vendorDetail } from '../errors.js';
+/**
+ * The provider's own account of what was wrong, kept — and scrubbed.
+ *
+ * `ProviderRequestErrorInit` declared `detail` from the beginning and the
+ * constructor never read it, so the field existed and carried nothing. The
+ * body was read to classify and then dropped, deliberately, because an error
+ * body can echo a request and a request can carry a key.
+ *
+ * The cost of that trade showed up in production: the wire had been saying
+ * `tools.0.custom.input_schema: … must match JSON Schema draft 2020-12` and
+ * the SDK deleted the sentence, so diagnosing it took seven eliminated
+ * hypotheses and a day of downtime. Keeping the sentence and scrubbing the
+ * credential shapes is the trade that was actually available.
+ */
+describe('the sentence that names the broken field survives', () => {
+    it('lifts the structured message out of a vendor body', () => {
+        const body = JSON.stringify({
+            type: 'error',
+            error: {
+                type: 'invalid_request_error',
+                message: 'tools.0.custom.input_schema: JSON schema is invalid. It must match JSON Schema draft 2020-12',
+            },
+        });
+        expect(vendorDetail(body)).toBe('tools.0.custom.input_schema: JSON schema is invalid. It must match JSON Schema draft 2020-12');
+    });
+    it('reaches the error a caller actually catches', () => {
+        const err = providerHttpError({
+            providerId: 'anthropic',
+            status: 400,
+            body: JSON.stringify({ error: { message: "Schema type 'oneOf' is not supported" } }),
+        });
+        expect(err.detail).toContain('oneOf');
+        // …and the message too, so a log line that prints only the message is
+        // still enough to act on.
+        expect(err.message).toContain('oneOf');
+    });
+    it('falls back to the raw text when the body is not JSON', () => {
+        expect(vendorDetail('upstream connect error, transport failure')).toBe('upstream connect error, transport failure');
+    });
+    it('says nothing rather than something empty', () => {
+        expect(vendorDetail(undefined)).toBeUndefined();
+        expect(vendorDetail(null)).toBeUndefined();
+        expect(vendorDetail('   ')).toBeUndefined();
+        expect(vendorDetail({})).toBeUndefined();
+    });
+    it('truncates a body that is not a sentence', () => {
+        const detail = vendorDetail('x'.repeat(5_000));
+        expect(detail?.length).toBeLessThanOrEqual(401);
+        expect(detail?.endsWith('…')).toBe(true);
+    });
+});
+describe('a credential never rides along', () => {
+    it.each([
+        ['sk-ant-api03-AbCdEfGhIjKlMnOpQrStUv', 'anthropic-style key'],
+        ['npm_aBcDeFgHiJkLmNoPqRsTuVwXyZ012345', 'npm token'],
+        ['ghp_aBcDeFgHiJkLmNoPqRsTuVwXyZ012345', 'github token'],
+        ['AKIAIOSFODNN7EXAMPLE', 'aws access key id'],
+    ])('scrubs %s (%s)', (secret) => {
+        const scrubbed = redactSecrets(`upstream rejected token ${secret} for this request`);
+        expect(scrubbed).not.toContain(secret);
+        expect(scrubbed).toContain('[redacted]');
+    });
+    it('scrubs a bearer header the vendor echoed back', () => {
+        const scrubbed = redactSecrets('bad header: Authorization: Bearer abcdef0123456789ABCDEF');
+        expect(scrubbed).not.toContain('abcdef0123456789ABCDEF');
+    });
+    it('scrubs a credential-named JSON field without eating the rest', () => {
+        const scrubbed = redactSecrets('{"api_key":"sk-live-9999","model":"the-model-that-failed"}');
+        expect(scrubbed).not.toContain('sk-live-9999');
+        // The surrounding sentence is the whole point — scrubbing must not
+        // degrade into deleting the message.
+        expect(scrubbed).toContain('the-model-that-failed');
+    });
+    it('scrubs on the real path, not only in the helper', () => {
+        const err = providerHttpError({
+            providerId: 'anthropic',
+            status: 401,
+            body: JSON.stringify({
+                error: { message: 'invalid key sk-ant-api03-AbCdEfGhIjKlMnOpQrStUv supplied' },
+            }),
+        });
+        expect(err.detail).not.toContain('AbCdEfGhIjKlMnOpQrStUv');
+        expect(err.detail).toContain('[redacted]');
+        expect(err.message).not.toContain('AbCdEfGhIjKlMnOpQrStUv');
+    });
+});
+//# sourceMappingURL=vendor-detail.test.js.map

package/dist/provider/__tests__/vendor-detail.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor-detail.test.js","sourceRoot":"","sources":["../../../src/provider/__tests__/vendor-detail.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE7E;;;;;;;;;;;;;GAaG;AAEH,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAClE,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3B,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACN,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EACN,8FAA8F;aAC/F;SACD,CAAC,CAAA;QAEF,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAC9B,8FAA8F,CAC9F,CAAA;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACtD,MAAM,GAAG,GAAG,iBAAiB,CAAC;YAC7B,UAAU,EAAE,WAAW;YACvB,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,EAAE,CAAC;SACpF,CAAC,CAAA;QAEF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACrC,sEAAsE;QACtE,0BAA0B;QAC1B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,YAAY,CAAC,2CAA2C,CAAC,CAAC,CAAC,IAAI,CACrE,2CAA2C,CAC3C,CAAA;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;QAC/C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;QAC1C,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;QAC3C,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAC9C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAA;QAC/C,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,IAAI,CAAC;QACP,CAAC,qCAAqC,EAAE,qBAAqB,CAAC;QAC9D,CAAC,sCAAsC,EAAE,WAAW,CAAC;QACrD,CAAC,sCAAsC,EAAE,cAAc,CAAC;QACxD,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;KAC7C,CAAC,CAAC,gBAAgB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,aAAa,CAAC,2BAA2B,MAAM,mBAAmB,CAAC,CAAA;QACpF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,MAAM,QAAQ,GAAG,aAAa,CAAC,0DAA0D,CAAC,CAAA;QAC1F,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACvE,MAAM,QAAQ,GAAG,aAAa,CAAC,4DAA4D,CAAC,CAAA;QAC5F,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QAC9C,mEAAmE;QACnE,qCAAqC;QACrC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAG,iBAAiB,CAAC;YAC7B,UAAU,EAAE,WAAW;YACvB,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACpB,KAAK,EAAE,EAAE,OAAO,EAAE,0DAA0D,EAAE;aAC9E,CAAC;SACF,CAAC,CAAA;QAEF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAA;QAC1D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAC1C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/provider/errors.d.ts

@@ -11,11 +11,19 @@
  *
  * So the contract here is deliberately narrow:
  *
- *  - the message is built from the STATUS LINE and the classified `kind`. The
- *    response body is read to classify and then dropped. It is never
- *    interpolated, never re-thrown, and never attached as `cause` — a `cause`
- *    survives every logger that serializes an error chain, which defeats the
- *    point.
+ *  - the message is built from the STATUS LINE, the classified `kind`, and the
+ *    provider's own complaint in `detail` — truncated and scrubbed of anything
+ *    credential-shaped. The raw body is never re-thrown and never attached as
+ *    `cause`; a `cause` survives every logger that serializes an error chain,
+ *    which defeats the point.
+ *
+ *    The body used to be dropped entirely. That was over-corrected: a provider
+ *    rejecting a request names the exact offending field, and deleting that
+ *    sentence turned a one-line diagnosis into hypothesis elimination against a
+ *    live API — once at the cost of a day of production downtime, while the
+ *    wire had been saying `tools.0.custom.input_schema: … must match JSON
+ *    Schema draft 2020-12` the entire time. Scrubbing what looks like a
+ *    credential keeps the safety and returns the sentence.
  *  - `retryAfterMs` is DATA. Nothing in this module sleeps, backs off or
  *    retries. A retry loop inside a driver burns the run's wall clock and hides
  *    the failure from the layer that should decide.
@@ -35,8 +43,33 @@ export declare class ProviderRequestError extends Error {
     readonly providerId: string;
     readonly status?: number;
     readonly retryAfterMs?: number;
+    /**
+     * What the provider said was wrong, truncated and redacted.
+     *
+     * `ProviderRequestErrorInit` has declared this field all along and the
+     * constructor never read it, so every caller that set it was writing to
+     * nothing. That is not a cosmetic gap: a provider rejecting a request
+     * usually names the exact offending field, and losing that sentence turns
+     * a one-line diagnosis into hypothesis elimination against a live API. It
+     * did — a tool schema in the wrong JSON Schema dialect cost a day of
+     * production downtime while the wire had been saying
+     * `tools.0.custom.input_schema: … must match JSON Schema draft 2020-12`
+     * the whole time.
+     *
+     * See {@link vendorDetail} for what is kept and what is scrubbed.
+     */
+    readonly detail?: string;
     constructor(init: ProviderRequestErrorInit);
 }
+/**
+ * The provider's own account of what was wrong, safe to log.
+ *
+ * Prefers the structured `error.message` a JSON body carries, because that is
+ * the field vendors put the actionable sentence in and it is bounded; falls
+ * back to the raw text. Truncated, and every credential shape replaced.
+ */
+export declare function vendorDetail(body: unknown): string | undefined;
+export declare function redactSecrets(text: string): string;
 /** Is this a classified provider failure, whichever SDK copy threw it? */
 export declare function isProviderRequestError(err: unknown): err is ProviderRequestError;
 /**

package/dist/provider/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/provider/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAA;AAC7F,YAAY,EACX,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,GACxB,MAAM,4BAA4B,CAAA;AAWnC;;;;;;;GAOG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC9C,SAAgB,IAAI,EAAE,iBAAiB,CAAA;IACvC,SAAgB,UAAU,EAAE,MAAM,CAAA;IAClC,SAAgB,MAAM,CAAC,EAAE,MAAM,CAAA;IAC/B,SAAgB,YAAY,CAAC,EAAE,MAAM,CAAA;gBAEzB,IAAI,EAAE,wBAAwB;CAQ1C;AAED,0EAA0E;AAC1E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,oBAAoB,CAOhF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAKhF;AAwCD,sEAAsE;AACtE,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAGhF;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAChC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACtC,GAAG,GAAE,MAAmB,GACtB,MAAM,GAAG,SAAS,CAepB;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACzC,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GAClB,iBAAiB,CAanB;AAyED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,oBAAoB,CAwCvB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,oBAAoB,CASvB"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/provider/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAA;AAC7F,YAAY,EACX,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,GACxB,MAAM,4BAA4B,CAAA;AAWnC;;;;;;;GAOG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC9C,SAAgB,IAAI,EAAE,iBAAiB,CAAA;IACvC,SAAgB,UAAU,EAAE,MAAM,CAAA;IAClC,SAAgB,MAAM,CAAC,EAAE,MAAM,CAAA;IAC/B,SAAgB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrC;;;;;;;;;;;;;;OAcG;IACH,SAAgB,MAAM,CAAC,EAAE,MAAM,CAAA;gBAEnB,IAAI,EAAE,wBAAwB;CAS1C;AAsBD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAiB9D;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQlD;AAkBD,0EAA0E;AAC1E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,oBAAoB,CAOhF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAKhF;AAwCD,sEAAsE;AACtE,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAGhF;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAChC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACtC,GAAG,GAAE,MAAmB,GACtB,MAAM,GAAG,SAAS,CAepB;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACzC,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GAClB,iBAAiB,CAanB;AAyED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,oBAAoB,CA0CvB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,oBAAoB,CAWvB"}